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(57) Abstract: Techniques and apparatuses for detecting 
false accepts in biometric authentication systems are 
provided. According to an aspect of the invention, a 
sequence of threshold tests are performed on measured 
biological data after it is compared to valid stored 
data. According to one embodiment, the threshold tests 
comprise a distance test (61 2). a rotational angle test (616), 
and. optionally, an alternate rotation angle test (636). In 
a fingeiprint sensing environment, the distance test (612) 
examines the separation between selected minutiae in 
a measured fmgerprint and corresponding minutiae in a 
stored constellation (300). In the rotational angle test 
(616), a total angle difference between selected minutiae 
in the measured fingerprint and corresponding minutiae in 
the stored constellation (300) is examined. In the alternate 
rotation angle test (636), a Gestalt rotational difference 
between selected minutiae in the measured fingerprint and 
in the stored constellation (300) is calculated. Thus, two 
independent calculations of the rotation angle between 
the sensed and valid constellations can be reconciled. In 
each of the tests, threshold parameters provide a cutoff for 
rejecting one or more matched minutia that are actually 
"false accepts'*. 
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TITLE OF THE INVENTION: 
BIOMETRIC FALSE ACCEPT DETECTION 
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BACKGROUND OF THE INVENTION 

1 . Field of the Invention 

1 5 This invention is related to the field of biometrics, and in particular to detectmg 

errors when validating biometric data. 

2. Background 

Biometric data is frequently used to verify or authenticate a particular individual 
who desires to gain access to some facility, be it a door entry system, a computer system, 
20 or a particular level of authorization in a computer program. 

A drawback to many computer systems is that they employ passwords, which must 
be memorized. Users frequently forget their passwords or they write them in non-secure 
place. Biometric sensors, which measure certain biological properties and use statistical 
analysis to validate a user, generally provide a better solution to passwords, at least in so 
25 far as the biometric data used to validate the user is always present - yet unknown. This 
is to say that there is no password that needs to be memorized and there is less risk of the 
validating information being compromised. 

One drawback to biometric systems is that wide-spread deployment is generally 
not practicable. At least one reason for this is that biometric systems often employ an 
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"escrow" functionality. The escrow functionality generally involves storage of a valid set 
of biometric data in a remote, presumably secure, server (hereinafter an "escrow server"). 
A measuring function typically records a user's biometric data and then compares the 
recorded data with data in the escrow server. If the data matches, then the escrow server 
5 may issue a response that the user passed a biometric test. 

However, having a central escrow server creates problems. First, a cracker may 
break into the escrow server and steal or manipulate the stored biometric data. Thus, 
privacy becomes an issue. Second, an unauthorized server may issue false indicators that 
particular recorded data matched the stored value in the escrow server. 

10 A solution to the escrow server is to employ a smartcard based system. A 

smartcard is small, portable card (much like a credit card) consisting of a memory that 
persistently stores the biometric data. When access to a particular facility is desired, a user 
simply inserts the smartcard into a smartcard reader and the reader extracts the biometric 
data firom the smartcard. The reader subsequently compares the extracted biometric data 

1 5 against measured biometric data from the biometric sensor. Alternatively, the biometric 
sensor provides the measured biometric data to the smartcard for processing. 

However, even this approach has drawbacks. One drawback is that smartcards, 
because of their physical constraints, are usually low-power systems that do not allow for 
a sophisticated microprocessor. Instead, a small instruction set microprocessor is used that 

20 has limited computational abilities and a limited memory. Due to the limited 

computational power of a smartcard, tradeoffs in accuracy need to be made if biometric 
data is to be verified in a reasonable amount of time. Therefore, it is possible that when 
the smartcard microprocessor attempts to compare measured data from a biometric sensor 
and a template stored in the smartcard, a certain number of "false accepts" occur. That is, 

25 the smartcard may erroneously accept biometric data that does not truly match the stored 
template, or the smartcard may accept biometric data that is a spoof of the item from 
which biometric data is collected. 



system is provided. According to an aspect of the invention, a sequence of threshold tests 
are performed on measured biological data after it is compared to valid stored data 



SUMMARY OF THE INVENTION 
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A method and apparatus for detecting false accepts in a biometric authentication 
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According to one embodiment, the threshold tests comprise a distance test, a rotational 
angle test, and, optionally, an alternate rotation angle test. 

In a fingerprint sensing environment, the distance test examines the separation 
between selected minutiae in a measured fingerprint and corresponding minutiae in a 
5 stored constellation. In the rotational angle test, a total angle difference between selected 
minutiae in the measured fingerprint and corresponding minutiae in the stored 
constellation is examined. In the alternate rotation angle test, a Gestalt rotational 
difference between selected minutiae in the measured fingerprint and in the stored 
constellation is determined. Thus, two independent calculations of the rotation angle 
10 between the sensed and valid constellations can be reconciled. 

In each of the tests, threshold parameters provide a cutoff for accepting or rejecting 
a measured fingerprint. According to one embodiment, the tests are sequentially 
performed and if any test fails, then the matched minutiae are rejected as "false accepts". 



FIG. 1 depicts a smartcard system comprising a smartcard, a smartcard reader, and 
a biometric sensor. 

FIG. 2A depicts fingerprint and select minutia. 

FIG. 2B depicts data parameters of a selected pair of minutiae. 



15 



BRIEF DESCRIPTION OF THE DRAWINGS 



20 



FIG. 3 depicts a data structure in a fingerprint template. 

FIG. 4 depicts data structures for matched fingerprint minutiae. 

FIG. 5 is a flowchart depicting an improved fmgerprint template matching 



technique. 



25 



FIGS. 6-7 are flowcharts depicting false accept processing. 
FIGS. 8A-C are conceptual schematics of a minutiae distance test. 
FIGS. 9A-C are conceptual schematics of a minutiae angle test 
FIGS. lOA-C are conceptual schematics of a minutiae rotation angle test. 
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DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS 
FIG. 1 depicts a smartcard system comprising a smartcard 100, a smartcard reader 
1 10, and a biometric data sensor 1 16. The smartcard 100 typically comprises a 
microprocessor 104 and a RAM 106, EEPROM 103(or equivalent persistent yet 
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programmable memory, such as "flash") and ROM 102, each communicatively coupled to 
the microprocessor 104. Executable software code (also called a "computer program'*) 
resides in ROM 102. RAM 106 is used for storage of variables and other runtime data 
need by the microprocessor 104. The smartcard reader 110 includes a microprocessor 1 14 
5 and RAM 1 12. The smartcard reader 1 1 0 may further comprise a ROM, in which 

executable software code resides, or the software code may be loaded over a bus 124 from 
an external storage device or computer. In operation, the smartcard 1 00 is inserted into the 
smartcard reader 110, wherein data is either transferred from the smartcard to the 
smartcard reader, or from the smartcard reader 1 1 0 to the smartcard 1 00 

10 The smartcard system depicted in FIG. 1 further comprises a biometric sensor 116, 

which is preferably a fingerprint sensor. The sensor 116 is configured to receive a finger. 
When a finger is placed over the sensor 116, the sensor 116 scans the fmger's print and 
creates a fingerprint image. (It is worth noting that the image can be an analog signal that 
is later converted into a digital representation or "template".) A presently preferred 

1 5 fingerprint sensor is the FPS 1 1 0 available from Veridicom Corporation in Santa Clara, 
California <http://www.veridicom.com>, or alternatively the Veridicom 5th Sense (TM) 
peripheral sensor. 

An exemplary sensed fingerprint image 200 is shown in FIG. 2A. A series of 
ridges have endpoints and bifiircations, which are commonly described as "minutia" 204. 

20 Select minutia from a sensed fingerprint are converted from their sensed form to a digital 
form as a data structure, one embodiment being a multidimensional fingerprint 
constellation (or simply "constellation"). An embodiment of a constellation is described 
below with reference to FIG. 3. 

When stored as a constellation, parameters are chosen to define the relationship 

25 between individual minutiae 204 in the fingerprint. Referring to FIG. 2B, a geometric 

representation 250 of two minutiae is shown. A first minutia 254 is selected as a reference 
minutia. A tangent 264 to the ridge of the first minutia 254 is determined and then 
extrapolated to intersect an x-axis 272 (for example, an x-axis of the sensor 116). An 
angle "alpha" is measured between the x-axis 272 and the tangent line 264. The x- and y- 

30 coordinates of the minutia 254 are also recorded. The first minutia 254 is then used a 
reference point to compare relative values with neighboring minutiae. 
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For example, a second minutia 258 is selected as a neighbor to minutia 254. X- 
and y-coordinates of the second minutia 258 are recorded, thus a distance 262 between the 
first minutia 254 and the second minutia 258 can be determined, as can an angle ^*beta*' — 
formed between lines 272 and 268. The difference between angle alpha and angle beta, or 
5 angle '"gamma" can be calculated by subtracting one angle from the other. Angle gamma 
can be represented as the angle formed between tangent line 264 (minutia 254) and 
tangent line 268 (minutia 258). 

The process described above can be repeated comparing a third, fourth, fifth, etc. 
minutia to the first minutia 254. Finally, a muhidimensional fingerprint constellation can 

10 be created that represents the relative values of the selected minutiae in a particular 
neighborhood. FIG. 3 depicts such a data structure. 

The multidimensional constellation 300 comprises a header 304 that can be used to 
identify the make and version of the multidimensional constellation 300. A reference 
identifier 312 gives the x-, y- and alpha- values for the reference (or first) minutia that is 

15 the basis for relative values in a neighborhood constellation 308. The neighborhood 
constellation 308 further comprises a plurality of data values for the neighbors of the 
reference identifier 312 (that is, the second, third, fourth, etc. minutia). There can be as 
many there can be as many neighborhoods 308 in a multidimensional fingerprint 
constellation 300 as are desired. According to one embodiment, there are one-hundred 

20 neighborhood constellations 308 in a multidimensional constellation 300. 

Three columns represent the relative values between the minutiae in each 
neighborhood constellation 308. They are columns 320, 324, and 328, which represent a 
relative distance, an angle, and a relative angle difference, respectively, as is discussed 
above with reference to FIG. 2B. There are as many neighbors 3 1 6 in a neighborhood 

25 constellation 308 as are desired. According to one embodiment, there are fifteen 

neighbors 316 in a neighborhood constellation 308. (It is noted that when data is stored in 
the muhidimensional constellation 300, it can be normalized so that the values have a 
uniform bit-size.) 

Returning to FIG. 1 , as used with the smartcard system, the fingerprint image 
30 measured by sensor 1 1 6 is transferred to RAM 11 2 as a multidimensional fingerprint 
constellation 300. For purposes of explanation, the sensed multidimensional fingerprint 
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constellation will be referred to hereinafter as "template B", while a valid 
multidimensional fingerprint constellation will be referred to hereinafter as "template A". 

When the smartcard 100 is inserted into the smartcard reader 110, information is 
exchanged over a conmiunication channel 120, be it physical or wireless, between the 
5 smartcard 100 and the smartcard reader 1 10. According to an embodiment of the 
invention, sensed template B is serially transferred, one neighborhood (or subset of 
template B) at a time, to RAM 106, where it can be compared by microprocessor 104 to 
the valid template A that is stored in the smartcard 100, for example in EEPROM 103. 



10 templates. Specific details of an embodiment of the generalized steps are described in co- 
pending U.S. Patent Application Serial No. 09/354,929. 

Referring to FIGS. 1 and 5, in step 504 biometric data, for example a fingerprint, is 
read fi-om sensor 116. A fingerprint template (template B) is created and placed in RAM 
1 12 in step 508. The first two steps are perfomied by the smartcard reader 110 and sensor 

15 116, while the subsequent steps are generally under control of the microprocessor 104. 

In step 512, a subset of template B is read from RAM 1 12 and transferred to RAM 
106. The subset is preferably a neighborhood constellation 308. In step 520, the subset of 
data fi-om template B is compared to sequential valid neighborhood constellations in 
template A. If the template data matches, then step 520 passes processing on to step 528. 

20 Otherwise, step 520 passes processing on to step 524, where the microprocessor 104 
causes a next subset of template B to be transferred firom RAM 1 12 to RAM 106. 

In step 528, template match sets are created for each reference value corresponding 
to the matched minutiae in templates A and B. If the reference values corresponding to 
FIG. 2B are used, then three template match sets are created - one for the x-, y-, and beta- 

25 values. 

FIG. 4 depicts an exemplary template match set 400. A first column 404 holds the 
matched x-, y- or beta-values for template A, and a second column 408 holds the 
corresponding x-, y- or beta- values for template B. There are as many rows 412 in the 
match sets as there are matched minutia (or "matches**) between templates A and B. 
30 According to one embodiment, each template match set 400 holds four matched pairs. 
Each match corresponds to a "score". The more matches, the higher the score. 



FIG. 5 is a flowchart depicting generalized steps for matching fingerprint 
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In Step 532, the score for the matches is compared against a first threshold value. 
If the score is greater than the first threshold value, then the matches are determined to be 
valid and not "false accepts". Accordingly, processing continues to step 540 where the 
minutia match is accepted. However, if the score is less than or equal to the first threshold 
5 value, then post processing occurs at step 536. According to one embodiment, the fu-st 
threshold value is the value four. If greater than four matches are found, then the odds of a 
false accept are low. However, if between one and four minutia matches are found, then 
the odds of a false accept are higher, thus a finer granularity of testing for a match is 
desired. 

10 FIG. 6 is a flowchart depicting post processing of template matches that have been 

marked as potential false accepts. In step 604, the score is compared against a second 
threshold value. If the score is less than the second threshold value, then the matches are 
rejected — as no meaningful finer granularity testing is possible. For example, the second 
threshold value can be three, so if one or two matches are foimd, then they are rejected in 

15 step 608 as false accepts because more certainty in the matches is desired. 

In step 612, a total separation between the minutiae in template A and then the 
minutiae in template B is calculated. FIGS. 8A-C show conceptual diagrams of an 
embodiment of a minutiae distance test corresponding to step 612. FIG. 8 A shows the 
total separation between a series of minutiae in template A, while FIG. 8B shows the same 

20 in template B. FIG. 8C shows how the two total separations are compared to a third 
threshold value. 

According to one embodiment, the total separation is determined by a total 
distance difference. In the total distance difference test, the total amount of separation 
between the minutiae in each template is calculated. For example, the x-value for the 

25 second match of template A is subtracted fi-om the x-value of the first match of template 
A. Next, that value is squared. Then the y-value for the second match of template A is 
subtracted from the y-value of the first match of template A. This result is also squared. 
Finally, a sum of the squares of the total x- and y- differences is calculated, which yields a 
total distance difference or "separation" value. An equation for the total distance 

30 difference is: 
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As indicated in Eq. (1), the process is repeated for each x- and y- value store.d in the 
template match sets corresponding to template A. It is also repeated for the x- and y- 
values corresponding template B. In an alternative embodiment, rather than squaring the 
difference, the sum of the absolute values of the differences can be compared, which can 
5 be less of a drain on the microprocessor's computational resources. 

In step 616 a rotation angle is calculated. Conceptual diagrams of an embodiment 
of a minutiae angle test corresponding to step 616 are shown in FIGS. 9A-C. FIGS. 9A 
and 9B show the beta angles between each minutia in templates A and B, respectively. 
FIG. 9C, while shov^ing only a single rotation angle, represents the broader concept. The 
10 sum of the differences of the beta angles (between templates A and B) is actually what is 
compared to the fourth threshold value. An equation for the total rotation angle, which 
represents the amount of rotation between the sensed and valid templates, is: 



15 threshold value. The third threshold amount can be any amount chosen by one who 
practices the invention and can vary depending on the types of minutia selected. For 
example, a greater tolerance may be expected when the minutiae are selected so as to 
maximize their separation, or when many minutiae are selected. However, a lesser 
amount of tolerance may be desired when the minutiae are selected base on their close 

20 proximity to the reference minutia. If the separation value is greater than the third 

threshold value, then the match is rejected as a false accept in step 624. According to an 
alternative embodiment, if the number of matches to be compared falls within a small 
range, dividing the sum by the score is not necessary because accommodation for the 
overestimate of the rotation angle can be accounted for in the selection of the fourth 

25 threshold value. 

However, if the separation value is not greater than the third threshold value, then 
in step 628 the angle error from step 616 is compared to the fourth threshold value. If the 
angle error is outside of the fourth threshold value, then the match is rejected as a false 
accept m step 632. Again, the fourth threshold value can be chosen arbitrarily by one who 

30 implements the invention described herein. As was the case in step 620, the smaller the 



(2) 



score 



In step 620 the separation calculated in step 612 is compared against the third 
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threshold value, the lower the odds that a false accept will occur and consequently greater 
certainty in the actual template matchings. 

However, if the rotation angle is within the fourth threshold value, then in step 636 
an alternative rotation angle between the two templates (or neighborhoods) is calculated. 
5 FIGS. lOA-C are conceptual diagrams of what is achieved by the alternate rotation angle 
calculation. FIG. 1 OA is a diagram of minutiae in template A. FIG. 1 OB is a diagram of 
minutiae in template B. FIG. IOC is a diagram showing the rotation angle between the 
minutiae of template A and template B, as well as a fifth threshold value. FIG. 7, 
described in detail below, shows one embodiment for calculating the alternate rotation 
10 angle in step 636. 

In step 640, the alternate rotation angle is compared to the fifth threshold value. If 
the alternate rotation angle is within the fifth threshold value, then the template matches 
are accepted in step 648. However, if the alternate rotation angle is not within the fifth 
threshold value, then it is rejected in step 644. If the accept in step 648 occurs, then the 
15 template matchings are determined to be valid and not false accepts. 

FIG. 7 depicts an embodiment of alternate rotation angle calculation. According to 
one embodiment, the altemate rotation angle is calculated so that two independent 
measures of the rotation between templates A and B can be compared. The first method 
uses the difference in the angles of the matched minutia pairs averaged over all the pairs 
20 (step 616). The second method, shown in FIG. 7 and 1 OA-C, uses a geometrical construct 
that calculates the centroids of the set of matched minutiae in each template and yields a 
Gestalt rotational difference. 

In step 704, a centroid of template A is calculated. This is done by separately 
summing the x- and then the y-values for the template A values in the match templates 
25 400, then dividing the totals by the total number of matches (or score). This normalizes 
the centroid for the neighborhoods of templates A and B. The same process is repeated for 
the X- and y-values for the template B values in the match templates 400 in step 708. 

Eq. (3) shows the result obtained by steps 712 through 776. In particular, steps 
712 through 748 represent the numerator of Eq. (3), while steps 752 through 772 represent 
30 the denominator of Eq. (3). Step 776 shows the division of the numerator by the 
denominator, while step 780 shows one embodiment of how the two independent 
calculations of the rotation angle can be compared. 
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J^[{x^j -centroid^,)*(x^j - centroid {y -centroid ^^)*iysj - centroid ^^)\ 



(3) 



l^tCK^^ -centroid^^)'{x^j -centroid^,)*{yBj - centroid g^)] 



The result of Eq. 3 is an approximation of the tangent of the rotation angle (in 
radians). When a greater degree of precision is needed so as to avoid approximation 
errors, successive approximation techniques or amplification methods can be employed 
5 when the results yield an angle approaching zero and +/- ninety degrees. Moreover, since 
most microprocessors used in a smartcard will not necessarily have the ability to perform 
floating point arithmetic, it is preferred that when the numerator or denominator is zero, 
that an appropriate rotation for the two templates be assumed (for example zero or ninety 
degrees). While most microprocessors in a smartcard 100 will have minimal mathematical 
10 functionality, the approximation made by Eq. (3) can obviously be replaced if geometric 
functions (e.g., sine, cosine, tangent) are mcluded with the microprocessor's instruction 
set. 

After step 776, the process continues to step 780, where the first rotation 
angle(616) is subtracted from the second (776). In step 784, the flow returns to step 640 

1 5 (FIG. 6). It is noted that step 780 is not necessary, although it is used in a presently 
preferred embodiment as a way to reconcile the first and second independent rotation 
angle calculations — ideally, the difference between the two rotations is zero. 

It is noted that the test in step 640 can be changed depending on whether step 780 
is performed. If step 780 is not performed, then the rotation angle determined by Eq. (3) 

20 can be compared the fourth threshold value. According to one embodiment, a rotation 

angle outside of 50 degrees is considered unacceptable and the match is rejected as a false 
accept. Otherwise, the test succeeds and the matches are accepted. 

The steps for biometric false accept error processing are preferably embodied in an 
executable computer program that is stored in a computer readable medium, such as the 

25 ROM 102, as one or more sequences of instructions that impart technical functionality into 
a computer processing system. Just prior to execution, the one or more sequences of 
instructions are loaded in to an execution memory area of the microprocessor 104 fi^om 
which they are ultimately performed. Not all of the steps have to be perfonned by a single 
microprocessor, such as processor 104. Rather, some of the instructions can be stored 

30 separate from the smartcard 1 00 and can be executed by a processing vmit completely 
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apart from the smartcard 100, for example in microprocessor 1 14, or in another remote 
unit coupled to either the smartcard 100 or the smartcard reader 110. Moreover, selected 



smartcard reader and the fingerprint sensor. Moreover, the personal computer will have 
connectivity to the Internet or an intranet, for example through an internet access provider, 
an internet service provider, or a local area network. A remote server on the network, the 
remote server including an application program such as a HTTP, CGI, ASP, Perl or XLM 

10 based banking or information system, will request authentication of a user at the personal 
computer. In turn, the personal computer will initiate instructions that cause the biometric 
sensor to sense biometric data from the user, and then cause the smartcard reader to 
validate the sensed data with data stored on the smartcard inserted into the smartcard 
reader. Once the smartcard has validated the sensed biometric data, an accept or reject 

15 signal is then transferred back to the personal computer. The personal computer can, in 
turn, send the accept, reject, or another acknowledgement signal back the remote server. 
Networking protocols such as TCP/IP or ATM, which are generally known in the art, can 
provide the connectivity transport between the computer systems on the network. 



20 make certain modifications or improvements to the subject invention, yet not depart from 
its overall spirit. For example, cryptographic functions may be used to encode data on the 
smartcard 100, or to protect communication channels from rote copying. For example, the 
techniques described in U.S. Patent Application Serial No. 09/306,148, filed April 26, 
1999, entitled, "HIGH SECURITY BIOMETRIC AUTHENTICATION OF USE OF 

25 PUBLIC KEY IN A PUBLIC KEY ENCRYPTION SYSTEM" can be employed. In 

another embodiment, the actual initial tests performed on the templates can include tests to 
detect spoofmg. For example, the methods disclosed in U.S. Provisional Application 
60/158,423, filed October 7, 1999, entitled "METHOD AND APPARATUS FOR 
DETERMINING A LIVING FINGER ON A FINGERPRINT SENSOR" can be 

30 employed. 



5 



steps can be performed by executable object code, while others are interpreted and then 
executed at runtime. 

According to one embodiment, a personal computer will be coupled to the 



Upon review the detailed description and drawings, one of skill in the art could 
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Further, the false accept error processing techniques can be moved completely off 
of the smartcard 100 and into another device, such as a computer or server attached to the 
smartcard reader 1 1 0 or the sensor 116. 

Numerous other modifications can be made, such as different ways of comparing a 
5 measured value to a valid value, or matched values to threshold values. Other 

normalization techniques can also be employed, such as conversion of angles to particular 
quadrants, or taking absolute values of the matched values. Even the data structures could 
be modified so they are modestly different or are amalgamations of the structures 
described above. Furthermore, the comparisons to threshold values can be made 
10 immediately after individual or particular calculations are made, or after all the 

calculations are made, so that a minimal number of instruction cycles are used when false 
accept error processing. Accordingly, the invention is to be interpreted consistent with the 
accompanying claims, rather than strictly limiting it to the detailed embodiments described 
above. 
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CLAIMS 

What is claimed is: 

1 . A method for detecting a false accept of a biometric template match, comprising: 
calculating (612) a separation distance between a plurality of sensed minutiae and 
5 a plurality of valid minutiae; 

comparing (620) said separation distance with a threshold separation distance; 
rejecting (624) said biometric template match separation distance is outside of said 

threshold separation distance; 
calculating (61 6) a rotation angle between said plurality of sensed minutia and said 
10 plurality of valid minutiae; 

comparing (628) said rotation angle with a threshold rotation angle; and 
rejecting (632) said biometric template match if said rotation angle is outside of 
said threshold rotation angle. 



1 5 2. The method of claim 1 , further comprising: 

calculating (636) an alternate rotation angle between said plurality of sensed 

minutiae and said plurality of valid minutia; 
comparing (640) said alternate rotation angle to a threshold altemate rotation 

angle; and 

20 rejecting (644) said biometric template match if said altemate rotation angle is 

outside of said threshold altemate rotation angle. 



3. The method of claim 2, wherein said act of calculating said altemate rotation angle 
comprises: 

25 determining (704) a first centroid of said plurality of valid minutiae; 

determining (708) a second centroid of said plurality of sensed minutiae; 
determining (720) a first difference between a first coordinate of one of said 
plurality of valid minutia and a first coordinate of said first centroid; 
deteraiining (724) a second difference between a first coordinate of one of said 
30 plurality of sensed minutia and a first coordinate of said second centroid; 

determining (732) a third difference between a second coordinate of one of said 
plurality of valid minutia and a second coordinate of said first centroid; 
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determining (736) a fourth difference between a second coordinate of one of said 
plurality of sensed minutia and a second coordinate of setid second centroid; 

multiplying (728) said first difference by said second difference to create a first 
product; 

multiplying (740) said third difference by said fourth difference to create a second 
product; and 

sxmiming (744) said first product and said second product to create a first portion 
of said alternate rotation angle. 

4. The method of claim 3, fiirther comprising: 

multiplying (760) said third difference by said second difference to create a third 
product; 

multiplying (764) said first difference by said fourth difference to create a fourth 
product; 

subtracting (768) said fourth product from said third product to create a second 

portion of said alternate rotation angle; and 
dividing (776) said first portion of said alternate rotation angle by said second 

portion of said alternate rotation angle to create a value corresponding to 

said alternate rotation angle. 

5. The method of claim 2, wherein said act of comparing said alternate rotation angle 
includes: 

calculating (780) a difference between said alternate rotation angle and said 
rotation angle; and 

comparing said difference between said alternate rotation angle and said rotation 
angle to said threshold alternate rotation angle. 

6. The method of claim 2, wherein said act of calculating said rotation angle 
comprises averaging a difference between a plurality of sensed minutia angles and a 
plurality of matched minutia angles. 

7. The method of claim 2, wherein said step of comparing said alternate rotation 
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angle to said threshold alternate rotation angle includes subtracting said alternate rotation 
angle from said rotation angle. 

8. A computer program for execution in one or more bioraetric authentication 
5 devices, the computer program configured to cause one or more microprocessors to 

perform the steps in any of claims 1 through 7. 

9. A smartcard comprising: 
a microprocessor ( 1 04); 

10 a random access memory (106) communicatively coupled to said microprocessor 

(104), said random access memory (106) configured to hold at least a 
portion of a first biometric template that corresponds to a sensed object; 
a persistent memory (103) communicatively coupled to said microprocessor (104), 
said persistent memory (103) configured to hold a second biometric 
15 template that corresponds to a valid object; and 

a read only memory (102) communicatively coupled to said microprocessor (104), 
said read only memory (102) including executable object code configured 
to cause said microprocessor (104) to: 

create one or more match templates (400) representing similar minutiae 
20 (412) between said first biometric template and said second 

biometric template; 
compare said one or more match templates (400) using a distance test 

(612), a first rotation angle test (616), and a second rotation angle 

test (636); and 

25 accept one or more match templates (400) if all of said tests are successful. 

10. The smartcard of claim 9, wherein said executable object code is further 
configured to cause said microprocessor (1 04) to reconcile said first rotation angle test 
(616) with said second rotation angle test (636). 

30 

1 1 . The smartcard of claim 9 or 1 0, wherein said distance test (6 1 2) is defined by the 
formula 
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said first rotation test (616) and said second rotation angle tests (636) are, alternatively, 
defined by the formulas 

-^=2 and 

score 

YAi^Aj 'cenfroid^,)*{Xsj -centroid^,)^{y^j -centroici^^,)*iyoj - centroid ^ ^)\ 

#=0 . 



f«0 



£lCK^.i -centroid^y)*{Xj,j 'Centroid^,)-{x^j -centroid^ J^iy^j centroid g^)] 



12. A biometric authentication system comprising: 
a smartcard (100) comprising: 
a microprocessor (104), 

10 a random access memory (1 06) coupled to said microprocessor (104) and 

configured to hold a set of sensed biometric information, 
a persistent memory (103) coupled to said microprocessor (104) and 

configured to hold a set of valid biometric information; 
a read only memory (102) coupled to said microprocessor (104) and 
15 configured to hold executable biometric testing software, and 

a first communication means communicatively coupled to said 
microprocessor; 

a smartcard reader (110) comprising second communication means, said second 
communication means configured to exchange information with said first 
20 communication means and second communication means; and 

a biometric sensing means (116) communicatively coupled to said smartcard (100) 
through second communication means, said biometric sensing means (116) 
configured to collect sensed biometric information fi^om an object and 
allow said smartcard reader (1 10) to send said sensed biometric information 
25 to said smartcard ( 1 00); 

wherein said microprocessor (104) in said smartcard (100), through said executable 

biometric testing software, is configured to compare said set of sensed 

biometric information to said set of valid biometric information, create a set 
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of matched biometric information (400), and verify said set of matched 
biometric information (400) using a distance test (612) and a first rotation 
angle test (616). 

5 13. The biometric authentication system of claim 12, wherein said microprocessor 
(104) in said smartcard (100) is further configured to verify said set of matched biometric 
information (400) using a second, independent, rotation angle test (636). 

14. The biometric authentication system of claim 12 or 13, wherein said set of sensed 
10 biometric information and said set of valid biometric information are stored a data 

structure representing a multidimensional fingerprint constellation (300). 

15. The biometric authentication system of claim 12, 13 or 14, further comprising a 
first computer coupled to said smartcard reader (110) and said biometric sensor (116), said 

15 first computer configured to initiate and dispatch data and commands to and from said 
smartcard (100) and said biometric sensor (116). 

16. The biometric authentication system of claim 15, further comprising: 

a second computer comprising a networked application, said second computer 
20 communicatively coupled to said first computer through a communications 

network, said second computer configured to send and receive additional 
data and commands to and fi-om said first computer fi*om said networked 
application, said additional data and commands including information that 
causes said biometric authentication system to activate; and 
25 said first computer fiirther configured to communicate over said conmiunications 

network to said second computer. 
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